Open Captive Web Portal for Private PSK - Default User Profile

[george_margarit]

Captive Web Portal with Return Aerohive Private PSK, sets Default User Profile to "default-profile".

However, "default-profile" has no firewall policies, allowing users to directly connect to the network.

Is it possible to configure a different User Profile, so we can apply the default firewall policy "Redirect-Only"?

This is possible with all other CWP options, but is overwritten when PPSK is selected.

[george_margarit]

OK, I believe I have found the solution for this, thanks Ashley for sharing the screenshot, it helped me figure it out.

The Open SSID is using the "Default User Profile" that is configured on the linked PPSK SSID.

I have created a new "captive-portal" user profile, which is linked to a new dedicated VLAN, which I can firewall accordingly on the network.

On the PPSK SSID, I have set the Default User profile to the new captive portal rdg-captiveportal.

Then I used Apply a different user profile to various clients and user groups and i have created an assignment policy, that would allow any registered user group to be assigned to the working Guest User profile.

Thank you

[samantha_lynn]

When you set the SSID up as a Registration SSID the user profile settings do go away because this isn't a full SSID, it's meant for registration only and not browsing. Users should only be able to reach the CWP to register, but they shouldn't be able to browse anywhere else. If they are able to browse before they connect to the PPSK SSID, that would be something you'd want to open a technical support case about since that is not intended functionality.

If you'd like to add me to the HiveManager as an external user with the email slynn@aerohive.com, I can take a look at the set up and see if there is anything out of place. If you do want me to take a look, please let me know your VHM Organization name (found by clicking the silhouette icon in the top right corner> Global Settings> Account Details> About half way down the page will be your organization name) and the name of the Network Policy you'd like me to focus on.

[george_margarit]

well, the "user access settings" are just not there. Something for @Aerohive Support​  to look at maybe.

[ashley_finch]

It's correct that you cannot change the default profile object, however you should be able to set which object the SSID is using and create a new one if required.

For instance, my screenshot above is using a customer User Profile (Internal-UP) from within configure > policy > self reg SSID > scroll to the "user access settings" > click add to create a new user profile, or select one if you already have one preconfigured.